Comment Comment by eyeris Since the cve data is from Trivy/Grype, that should be osv.dev parent eyeris 9 months ago
